{"vulnerability": "CVE-2025-20354", "sightings": [{"uuid": "95444b8d-a02a-4e7e-828b-4d10eafb999c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3m4ys5fgln62a", "content": "", "creation_timestamp": "2025-11-07T00:11:43.837819Z"}, {"uuid": "b6ce7f7e-1737-43bf-b09c-5d1e163659dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20354", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m4z4owqqiu2c", "content": "", "creation_timestamp": "2025-11-07T03:20:29.390596Z"}, {"uuid": "4bce1b4c-b9dd-4f7b-a50e-b042164ed5d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f8b033dc1cd25d3018f2cb19646ccba4", "content": "", "creation_timestamp": "2025-11-05T17:10:26.000000Z"}, {"uuid": "4430f0bd-1d3e-44b0-924a-3203b947f462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m55niyfiac25", "content": "", "creation_timestamp": "2025-11-08T22:32:02.117061Z"}, {"uuid": "d481a498-def2-4bdf-a681-0be3411d2e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m5crirmawk23", "content": "", "creation_timestamp": "2025-11-10T23:26:51.587379Z"}, {"uuid": "3b289646-a3c9-46be-97ee-04a22831c647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115508504404845709", "content": "", "creation_timestamp": "2025-11-07T12:51:44.010922Z"}, {"uuid": "97b7ec75-6791-45f6-88c2-cdc0df0ef937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115508506536198665", "content": "", "creation_timestamp": "2025-11-07T12:52:16.762950Z"}, {"uuid": "c3722f51-fecb-4c3f-8072-b479bb844c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3m524nh4dvk2z", "content": "", "creation_timestamp": "2025-11-07T12:52:19.319483Z"}, {"uuid": "fe408036-e571-4bee-9122-4109dd30d1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m52ab6hem225", "content": "", "creation_timestamp": "2025-11-07T13:57:02.906003Z"}, {"uuid": "aee560fd-2806-4f78-b6f6-7bf22e2b4a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20354", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m57ftlvhot2r", "content": "", "creation_timestamp": "2025-11-09T15:20:07.777209Z"}, {"uuid": "60cd369b-0a2d-4a55-8ffa-1869bb99672d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20354", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m4x2cgnaaq2l", "content": "", "creation_timestamp": "2025-11-06T07:32:23.407909Z"}, {"uuid": "da78faf9-8499-4245-bc1b-16ea722099db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20354", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52bkwcrlzf2", "content": "", "creation_timestamp": "2025-11-07T14:20:25.626239Z"}, {"uuid": "b2042fd8-edbc-43c0-9c22-8f22201a81c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m52zbboayc2k", "content": "", "creation_timestamp": "2025-11-07T21:24:35.855273Z"}, {"uuid": "66d054e9-329d-42b0-a127-e9eef339f1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20354", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4xx4qf2lu62", "content": "", "creation_timestamp": "2025-11-06T16:08:42.829166Z"}, {"uuid": "9dae1bf9-3503-409d-91b0-19df122d1661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/115543621066803958", "content": "", "creation_timestamp": "2025-11-13T17:43:12.711370Z"}, {"uuid": "425a29fe-97f9-4556-8ee6-9722decacc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4y5qp4btx22", "content": "", "creation_timestamp": "2025-11-06T18:06:42.049732Z"}, {"uuid": "da3d9dde-c2d3-4c9e-8f4c-f9313d9156ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20354", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4y6k3lxbnt2", "content": "", "creation_timestamp": "2025-11-06T18:21:25.119948Z"}, {"uuid": "cde4e5f3-5541-4f16-94b5-aa96f3043d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4yjiqc7ik2g", "content": "", "creation_timestamp": "2025-11-06T21:37:00.175513Z"}, {"uuid": "b2bc4fc1-3847-4111-96b1-313dfbef5dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "published-proof-of-concept", "source": "Telegram/Z22ddpILY-yeUUVWiXwyxi9IfQjGUAfHXsS4qd56wYck-To", "content": "", "creation_timestamp": "2025-11-07T03:00:06.000000Z"}, {"uuid": "708f55c3-1a2d-4634-b4f0-d4ffd8fd01d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/58603", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-20354\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-20354\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-06T20:41:52.000000Z"}, {"uuid": "ffe4072f-9e23-48a7-99e4-0bab2e19d11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1875", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nCisco fixes critical UCCX flaws, patch ASAP! (CVE-2025-20358, CVE-2025-20354)\n\n\u2014\n\nSummary:\nCisco has fixed two critical vulnerabilities (CVE-2025-20358, CVE-2025-20354) affecting Unified Contact Center Express (UCCX), which may allow attackers to bypass authentication, compromise vulnerable installations, and elevate privileges to root. The good news is that there is currently no evidence of the vulnerabilities being leveraged by attackers. However, updating to a fixed version is advised, as there are no workarounds for addressing them. CVE-2025-20358 and CVE-2025-20354 fixed, along...\n\n\u2014\n\nSource: Help Net Security\nPublished: 2025-11-06 15:12 | Author: Zeljka Zorz\n\n#fixes #vulnerabilities__exploits #cisco\n\nhttps://www.helpnetsecurity.com/2025/11/06/cisco-fixes-critical-uccx-flaws-patch-asap-cve-2025-20358-cve-2025-20354/", "creation_timestamp": "2026-09-09T05:00:16.007969Z"}, {"uuid": "de017e48-4ad6-45fa-9851-41beec130366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1902", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco UCCX \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\n\n\u2014\n\nSummary:\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u0435 \u0434\u0432\u0443\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Unified Contact Center Express (CCX), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 5 \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Cisco Unified CCX. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a CVE-2025-20354 \u0438...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-07 08:02 | Author: Vulner Queen\n\n#uccx #general_cyber_news #cisco\n\nhttps://1275.ru/vulnerability/kriticheskie-uyazvimosti-v-cisco-uccx-pozvolyayut-vypolnyat-proizvolnyy-kod-udalenno_16113", "creation_timestamp": "2026-09-09T05:00:15.873487Z"}, {"uuid": "bf8fa56f-6a91-4c98-9fb3-fe6fbf777021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "published-proof-of-concept", "source": "https://t.me/Intel_Encyclopedia/1902", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco UCCX \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\n\n\u2014\n\nSummary:\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u0435 \u0434\u0432\u0443\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Unified Contact Center Express (CCX), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 5 \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Cisco Unified CCX. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a CVE-2025-20354 \u0438...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-07 08:02 | Author: Vulner Queen\n\n#uccx #general_cyber_news #cisco\n\nhttps://1275.ru/vulnerability/kriticheskie-uyazvimosti-v-cisco-uccx-pozvolyayut-vypolnyat-proizvolnyy-kod-udalenno_16113", "creation_timestamp": "2026-09-10T00:00:35.672900Z"}, {"uuid": "04cff70a-7742-4cfd-bb48-ccf40566d112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20354", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1875", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nCisco fixes critical UCCX flaws, patch ASAP! (CVE-2025-20358, CVE-2025-20354)\n\n\u2014\n\nSummary:\nCisco has fixed two critical vulnerabilities (CVE-2025-20358, CVE-2025-20354) affecting Unified Contact Center Express (UCCX), which may allow attackers to bypass authentication, compromise vulnerable installations, and elevate privileges to root. The good news is that there is currently no evidence of the vulnerabilities being leveraged by attackers. However, updating to a fixed version is advised, as there are no workarounds for addressing them. CVE-2025-20358 and CVE-2025-20354 fixed, along...\n\n\u2014\n\nSource: Help Net Security\nPublished: 2025-11-06 15:12 | Author: Zeljka Zorz\n\n#fixes #vulnerabilities__exploits #cisco\n\nhttps://www.helpnetsecurity.com/2025/11/06/cisco-fixes-critical-uccx-flaws-patch-asap-cve-2025-20358-cve-2025-20354/", "creation_timestamp": "2026-09-10T00:00:35.803244Z"}]}